Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/811463-39ff-48fa-b3c5-e83689433dc0/1/sRiuJMlM1AJ0s4B7q_yLm8zqizY.mft
File:                     sRiuJMlM1AJ0s4B7q_yLm8zqizY.mft (raw, json)
Hash identifier:          uvdRCsi0JkRJ3uyV7F6FtJvMMbYczfYMWjVUSKNRFDM=
Subject key identifier:   59:C9:C8:A8:11:03:2F:C9:0B:7A:29:E6:C0:8C:2A:49:32:D9:44:4D
Authority key identifier: B1:18:AE:24:C9:4C:D4:02:74:B3:80:7B:AB:FC:8B:9B:CC:EA:8B:36
Certificate issuer:       /CN=b118ae24c94cd40274b3807babfc8b9bccea8b36
Certificate serial:       0198D6989160DE6716F60E4458DBF3279522
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sRiuJMlM1AJ0s4B7q_yLm8zqizY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/811463-39ff-48fa-b3c5-e83689433dc0/1/sRiuJMlM1AJ0s4B7q_yLm8zqizY.mft
Manifest number:          0FB6
Signing time:             Sat 23 Aug 2025 11:02:59 +0000
Manifest this update:     Sat 23 Aug 2025 11:02:59 +0000
Manifest next update:     Sun 24 Aug 2025 11:02:59 +0000
Files and hashes:         1: 3VLZ851VUhXxIG7ryQ-8eGekA3s.roa (hash: WkKK7D8YH2zVVECR2pK95SMukGQlzInUKX5HdUYAXRs=)
                          2: sRiuJMlM1AJ0s4B7q_yLm8zqizY.crl (hash: JG7VhSJaxFZcLFOxWPr9bkDfV/rYBUa17byKh7OKzTI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/811463-39ff-48fa-b3c5-e83689433dc0/1/sRiuJMlM1AJ0s4B7q_yLm8zqizY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/811463-39ff-48fa-b3c5-e83689433dc0/1/sRiuJMlM1AJ0s4B7q_yLm8zqizY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sRiuJMlM1AJ0s4B7q_yLm8zqizY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 11:02:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:98:91:60:de:67:16:f6:0e:44:58:db:f3:27:95:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b118ae24c94cd40274b3807babfc8b9bccea8b36
        Validity
            Not Before: Aug 23 11:02:59 2025 GMT
            Not After : Aug 24 11:02:59 2025 GMT
        Subject: CN=59c9c8a811032fc90b7a29e6c08c2a4932d9444d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c1:0f:ef:8e:c1:1c:91:87:87:00:28:16:b5:
                    ae:72:33:f5:66:f1:76:4d:b5:c0:5c:43:47:00:76:
                    38:9c:59:66:68:a7:b4:d4:8d:db:9c:25:8e:2c:dc:
                    b2:6f:37:34:51:c7:76:d2:a5:c7:aa:3d:95:cc:36:
                    6c:40:be:16:16:b7:e4:b9:e9:c4:33:d6:c0:e1:61:
                    01:80:4c:3c:00:6b:1d:0f:9b:9b:5c:0a:ad:4d:13:
                    76:60:59:bc:aa:43:d1:2b:08:31:78:eb:bc:3d:9a:
                    4b:32:bc:2a:40:f2:fa:da:21:b6:f6:bd:5d:41:38:
                    b4:51:5e:22:88:a1:0c:75:7f:3d:da:3c:c9:90:ef:
                    09:0b:2e:77:52:52:c5:57:27:11:f1:f5:57:63:b8:
                    b5:98:94:10:fa:99:ea:10:b8:c0:11:e4:c9:34:5c:
                    20:4c:5b:b4:7f:19:16:e2:cb:92:6a:a6:34:6b:e3:
                    dc:d7:51:7f:fa:28:b7:ed:8f:90:e3:e0:40:70:44:
                    d8:22:c7:cd:e8:b7:62:e1:a5:84:25:f6:68:65:15:
                    4e:00:a9:0e:25:12:71:82:bf:3e:10:be:88:10:be:
                    98:6e:c0:41:80:5b:bd:10:28:02:38:43:23:af:53:
                    a7:02:f4:4e:36:5b:e7:ed:d9:0e:74:d1:72:93:48:
                    1f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:C9:C8:A8:11:03:2F:C9:0B:7A:29:E6:C0:8C:2A:49:32:D9:44:4D
            X509v3 Authority Key Identifier:
                keyid:B1:18:AE:24:C9:4C:D4:02:74:B3:80:7B:AB:FC:8B:9B:CC:EA:8B:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRiuJMlM1AJ0s4B7q_yLm8zqizY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/811463-39ff-48fa-b3c5-e83689433dc0/1/sRiuJMlM1AJ0s4B7q_yLm8zqizY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/811463-39ff-48fa-b3c5-e83689433dc0/1/sRiuJMlM1AJ0s4B7q_yLm8zqizY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:92:44:94:7f:cf:83:ee:01:74:c3:77:fa:6f:65:31:12:01:
         d9:ea:05:b5:64:bd:ef:44:50:53:7d:60:a6:1b:6f:13:eb:a0:
         90:b0:07:4b:3b:bc:18:69:f5:c8:ee:b0:ac:d7:08:a1:44:6b:
         5a:e4:80:41:47:9a:21:db:ec:ac:31:ed:00:fa:54:93:52:a6:
         bf:0c:b3:08:b6:97:09:07:87:c6:0e:49:48:71:03:a1:7d:44:
         f6:6a:3d:57:0b:ab:6e:cf:65:ea:be:55:89:c4:6e:c2:d1:16:
         4f:2d:21:29:f9:a7:e9:d0:98:80:71:13:ec:89:3e:16:16:ad:
         14:fc:32:aa:9d:06:89:59:e6:69:54:1e:7c:7d:20:88:76:06:
         d4:db:c8:6b:92:ff:ef:d4:2d:25:04:e7:4b:20:d2:77:90:83:
         0a:26:6e:83:01:1d:48:b8:30:12:84:01:8b:2b:82:c2:82:b2:
         cd:11:88:cf:32:6a:d7:48:b2:7b:65:a6:b1:01:c3:c2:81:e2:
         b3:cf:2d:6c:bb:90:f7:5b:35:05:74:4b:82:3e:7c:27:1c:5e:
         51:3a:1a:90:fb:fa:47:23:95:ba:0c:9c:c0:b4:2f:a2:b3:e1:
         6f:3c:5d:f7:79:3b:52:a2:2f:9f:35:5f:61:32:88:9a:b3:0b:
         e9:21:da:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWmJFg3mcW9g5EWNvzJ5UiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxMThhZTI0Yzk0Y2Q0MDI3NGIzODA3YmFiZmM4YjliY2Nl
YThiMzYwHhcNMjUwODIzMTEwMjU5WhcNMjUwODI0MTEwMjU5WjAzMTEwLwYDVQQD
Eyg1OWM5YzhhODExMDMyZmM5MGI3YTI5ZTZjMDhjMmE0OTMyZDk0NDRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMEP747BHJGHhwAoFrWucjP1ZvF2
TbXAXENHAHY4nFlmaKe01I3bnCWOLNyybzc0Ucd20qXHqj2VzDZsQL4WFrfkuenE
M9bA4WEBgEw8AGsdD5ubXAqtTRN2YFm8qkPRKwgxeOu8PZpLMrwqQPL62iG29r1d
QTi0UV4iiKEMdX892jzJkO8JCy53UlLFVycR8fVXY7i1mJQQ+pnqELjAEeTJNFwg
TFu0fxkW4suSaqY0a+Pc11F/+ii37Y+Q4+BAcETYIsfN6Ldi4aWEJfZoZRVOAKkO
JRJxgr8+EL6IEL6YbsBBgFu9ECgCOEMjr1OnAvRONlvn7dkOdNFyk0gfSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFnJyKgRAy/JC3op5sCMKkky2URNMB8GA1UdIwQY
MBaAFLEYriTJTNQCdLOAe6v8i5vM6os2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1JpdUpNbE0xQUowczRCN3FfeUxtOHpxaXpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS84MTE0NjMtMzlmZi00OGZhLWIzYzUt
ZTgzNjg5NDMzZGMwLzEvc1JpdUpNbE0xQUowczRCN3FfeUxtOHpxaXpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS84MTE0NjMtMzlmZi00OGZhLWIzYzUtZTgzNjg5NDMzZGMw
LzEvc1JpdUpNbE0xQUowczRCN3FfeUxtOHpxaXpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP5JElH/P
g+4BdMN3+m9lMRIB2eoFtWS970RQU31gphtvE+ugkLAHSzu8GGn1yO6wrNcIoURr
WuSAQUeaIdvsrDHtAPpUk1KmvwyzCLaXCQeHxg5JSHEDoX1E9mo9Vwurbs9l6r5V
icRuwtEWTy0hKfmn6dCYgHET7Ik+FhatFPwyqp0GiVnmaVQefH0giHYG1NvIa5L/
79QtJQTnSyDSd5CDCiZugwEdSLgwEoQBiyuCwoKyzRGIzzJq10iye2WmsQHDwoHi
s88tbLuQ91s1BXRLgj58JxxeUToakPv6RyOVugycwLQvorPhbzxd93k7UqIvnzVf
YTKImrML6SHaFg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:08:42 2025 by rpki-client